Architecture

System-wide architecture: C4 container view, authentication flows, the service-to-service auth matrix, and the OPEA microservices contract surface.

Documents in this section

  1. Architecture Overview — C4 context/container view, RAG pipeline flow, gateway/auth flows, observability, and API structure.
  2. OPEA Microservices — Architecture of the genie-ai-overlay/ layer: chatqna, retriever, reranker, dataprep, embedding, textgen — and the inter-service contract surface.
  3. Trust Boundaries & Security Architecture — Authentication, JWT validation, JWKS caching, gateway header chain, and the security threat model.

Architecture

System architecture: C4 context and container views, the RAG pipeline flow, database schema, and API structure.

OPEA Microservices

Architecture of the OPEA overlay layer — chatqna, retriever, reranker, dataprep, embedding, textgen — and the inter-service contract surface between them.

Trust Boundaries & Security Architecture

Authentication, JWT validation, JWKS caching, gateway header chain, and the failure modes every deployer needs to know.